PT-2007-2349 · Php+1 · Php+1

Publicado 2007-02-13 · Atualizado 2018-10-30 · CVE-2007-0908

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.2.1 PHP versions prior to 4.4.5

Description: The issue is related to the WDDX deserializer in the wddx extension, which does not properly initialize the key length variable for a numerical key. This allows attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.

Recommendations: For PHP versions prior to 5.2.1, update to version 5.2.1 or later. For PHP versions prior to 4.4.5, update to version 4.4.5 or later.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-0908

DSA-1264-1

RHSA-2007:0076

RHSA-2007:0081

RHSA-2007:0082

RHSA-2007:0088

RHSA-2007:0089

RHSA-2007_0076

RHSA-2007_0082

Produtos afetados

Php

Red Hat

Referências · 63

• 🔥 https://exploit-db.com/exploits/3414 · Exploit
• https://access.redhat.com/security/cve/CVE-2007-0910 · Nota
• https://access.redhat.com/errata/RHSA-2007:0076 · Nota
• http://osvdb.org/32766 · Nota
• https://access.redhat.com/security/cve/CVE-2007-1285 · Nota
• http://php.net/releases/5_2_1.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0908 · Nota de Segurança
• http://secunia.com/advisories/24236 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185 · Nota
• https://access.redhat.com/security/cve/CVE-2007-0906 · Nota
• https://access.redhat.com/security/cve/CVE-2007-0907 · Nota
• http://security.gentoo.org/glsa/glsa-200703-21.xml · Aviso do Fabricante
• http://php.net/ChangeLog-5.php#5.2.1 · Nota
• https://access.redhat.com/security/cve/CVE-2007-1380 · Nota
• https://access.redhat.com/security/cve/CVE-2007-1701 · Nota